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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

1 . (Currently Amended) A validation protocol performed in a system for determining 
whether an untrusted authentication chip in communication with the system is valid, or not, 
including the steps of: 

generating a random number in a trusted authentication chip in communication with 
the system ; 

applying, in the trusted authentication chip, a keyed one way function to the random 
number using a first secret key from the trusted authentication chip to produce a first encrypted 
outcome; 

applying, in the untrusted authentication chip, a keyed one way function to the random 
number using a second secret key from the untrusted authentication chip to produce a second 
encrypted outcome; 

comparin g, using the system, the first encrypted outcome and the second encrypted 
outcome, without knowledge of the first k e y or the and second keysecretkeys, and in the event 
of a match considering the untrusted chip to be valid; 

otherwise considering the untrusted chip to be invalid. 

2. (Cancelled). 

3. (Original) A validation protocol according to claim 1, where the domain of the random 
numbers generated is non-deterministic. 

4. (Original) A validation protocol according to claim 1, where the keyed one-way 
function is a symmetric cryptograph, a random number sequence, or a message authentication 
code. 

5. (Previously Presented) A validation protocol according to claim 1, where the first and 
second keys have a minimum size of 128 bits where the one-way function is a symmetric 
cryptographic function. 
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6. (Currently Amended) A validation system for determining whether an untrusted 
authentication is valid, or not, where the system comprises: 

a random number generator to generate a random number; 

a trusted authentication chip, the trusted authentication chip including a keyed one-way 
function and a first secret key for the one-way function, the trusted authentication chip 
applying the keyed one way function to the random number using the first secret key to 
produce a first encrypted outcome; 

an untrusted authentication chip, the untrusted authentication chip including the keyed 
one way function and a second secret key, the untrusted authentication chip applying the keyed 
one way function to the random number using the second secret key to produce a second 
encrypted outcome; and 

comparison means to compare the first encrypted outcome and the second encrypted 
outcome, without knowledge of the first k e y or th e and second ke vsecret keys ; 

whereby, in the event of a match between the outcomes from the trusted chip and the 
untrusted chip, the untrusted chip is considered to be valid. 

7. (Cancelled) 

8. (Original) A validation system according to claim 6, where the trusted authentication 
chip contains a random function to produce random numbers from a seed, and the function 
advances after every random number is produced so that the next random number will be 
produced from a new seed. 

9. (Currently Amended) A validation system according to claim 7 claim 6 , where each 
trusted authentication chip contains a random function to produce random numbers from a 
seed, and for a group of authentication chips, each chip has a different initial seed, so that 
the first call to each chip requesting a random number will produce different results for each 
chip in the group. 

10. (Original) A validation system according to claim 8, where the domain of the random 
numbers generated is non-deterministic. 

1 1 . (Original) A validation system according to claim 6, where the keyed one-way 
functions is a symmetric cryptograph, a random number sequence, or a message authentication 
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code. 

12. (Previously Presented) A validation system according to claim 6, where the first or 
second keys for the keyed one-way function have at least 128 bits where the one-way function 
is a symmetric cryptographic function. 



